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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

1 . (Currently Amended) A method of managing security keys provided to users 
of a service, the method comprising the steps of: 

issuing a security key to a first user eligible to receive the service; 
monitoring the first user's status to establish whether the first user is eligible to 
receive the service; 

establishing, in accordance with a policy, a first value associated with invalidation of 
the first user's security key at a particular point in time, and a second value associated with 
providing the service to an ineligible user at the particular point in time, and if the second 
value exceeds the first value, invalidating the first user's security key at the particular point in 
time, 

wherein the first user's security key is kept valid if the second valid value does not 
exceed the first value, and 

wherein the policy provides that the second value is related to the economic penalty 
associated with provision of the service to the ineligible user. 

2. (Previously Presented) A method according to claim 1 wherein the 
policy further provides that the first value is related to the economic penalty associated with 
reconfiguration of security keys issued to other users consequent to invalidation of the first 
user's security key. 

3. (Canceled). 

4. (Previously Presented) A method according to claim 1 wherein the 
second value is calculated by aggregating the economic penalty associated with provision of 
the service to each ineligible user. 

5. (Original) A method according to claim 4 wherein the economic penalty 
associated with provision of service to ineligible users includes a value representative of 
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dilution of economic value to eligible users consequent to provision of the service to 
ineligible users. 

6. (Previously Presented) A method according to claim 1 wherein the 
economic penalty of providing the service to ineligible users includes any costs arising from 
the provision of network and server capacity to ineligible users. 

7. (Previously Presented) A method according to claim 2 wherein the 
security keys are generated in an ancestrally-based hierarchy, and wherein invalidation of a 
given key necessitates a need for reconfiguration of each security key in the hierarchy. 

8. (Previously Presented) A method according to claim 7 wherein upon 
invalidation of a given security key, an other security key requires reconfiguration only to the 
extent that it shares common ancestor security keys with the given invalidated security key. 

9. (Original) A method according to claim 8 wherein the hierarchy is a 
binary tree. 

10. (Currently Amended) A method of managing provision of security keys to a 
plurality of users of a network service, the method comprising the steps of: 

generating a plurality of security keys, each of which is related ancestrally to at least 
one other security key of the plurality of security keys; 
issuing security keys to users; 

monitoring users' status for continuing eligibility for consumption of the service; and 
upon establishing ineligibility of a user, determining upon the basis of a 
predetermined policy, a value for economic disbenefit to a provider of the service of (a) 
invalidation of the ineligible user's security key; and (b) provision of service to an ineligible 
user. 

1 1 . (Previously Presented) A method according to claim 1 0 further 
comprising the step of invalidating the security key if the disbenefit of providing service to an 
ineligible user is greater than the disbenefit of invalidating the security key. 
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12. (Previously Presented) A method according to claim 11 further 
comprising the step of aggregating the disbenefit of providing the service to each ineligible 
user, and invalidating the security key only if the aggregated disbenefit of providing the 
service to all ineligible users is greater than the disbenefit of invalidating the security key. 

13. (Previously Presented) A method according to claim 10 wherein 
invalidation of the security key necessitates reconfiguration of each other security key to the 
extent another security key shares common ancestry with the invalidated security key. 

14. (Currently Amended) A method according to claim 9, further comprising the 

step of: 

assigning security keys to users based on a length of time subscribed to for the service, 
wherein a first set of users who have subscribed for a length of time less than a 

predetermined time are assigned security keys in a first subsection of the binary tree, 

wherein a second set of users who have subscribed for a length of time greater than or 

equal to the predetermined time are assigned security keys in a second subsection of the 

binary tree, and 

wherein the security keys of the first subsection of the binary tree only share a fifst 
zeroth generation root key as a common ancestor with the security keys of the second 
subsection of the binary tree. 

15. (Currently Amended) A method according to claim 13, wherein the related 
ancestry of the security keys is determined by way of a binary tree in which the security keys 
are assigned, 

wherein the issuing step comprising comprises the step of: 

assigning security keys to the users based on a length of time subscribed to for the 

service, 

wherein a first set of users who have subscribed for a length of time less than a 
predetermined time are assigned security keys in a first subsection of the binary tree, 

wherein a second set of users who have subscribed for a length of time greater than or 
equal to the predetermined time are assigned security keys in a second subsection of the 
binary tree, and 
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wherein the security keys of the first subsection of the binary tree only share a first 
zeroth generation root key as a common ancestor with the security keys of the second 
subsection of the binary tree. 

16. (Previously Presented) A method according to claim 4, wherein the 
security keys are generated in an ancestry-based, binary tree hierarchy, 

wherein invalidation of a given key necessitates a need for reconfiguration of each key 
in the hierarchy, 

wherein the first value is computed by adding a first cost associated with invalidating 
all security keys of the ineligible users, with a second cost associated with reconfiguring all 
security keys of eligible users that are in an ancestry chain of any one of the security keys of 
the ineligible users. 

17. (Previously Presented) A method according to claim 10, wherein the 
security keys are generated in an ancestry-based, binary tree hierarchy, 

wherein invalidation of a given key necessitates a need for reconfiguration of each key 
in the hierarchy, 

wherein the value for economic disbenefit to the provider is computed by adding a 
first cost associated with invalidating the ineligible user's security key, with a second cost 
associated with reconfiguring all security keys of eligible users that are in an upper ancestry 
level in a same ancestry chain as the ineligible user's security key, and with a third cost 
associated with invalidating all security keys in the binary tree hierarchy that are of a lower 
ancestry level in the same ancestry chain as the ineligible user's security key. 

18. (Previously Presented) A method according to claim 1, wherein the 
issuing step is performed by a server, and wherein the issuing step includes providing the 
security key to the first user in a cookie returned to the first user by the server over the 
Internet. 

19. (Previously Presented) A method according to claim 10, wherein the 
issuing step is performed by a server, and wherein the issuing step includes providing the 
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security keys to the users in cookies respectively returned to the users by the server over the 
Internet. 

20. (Previously Presented) A method according to claim 17, wherein the 
second cost includes a cost associated with creating a new binary tree to provide a new set of 
security keys to replace all invalidated security keys. 

21. (Currently Amended) A method according to claim [[l8]] j/7, wherein the 

third cost includes a cost associated with creating a new binary tree to provide a new set of 
security keys to replace all invalidated security keys. 
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